10308 matches found
Interview: Crypto Legend Ron Rivest On Fixing SSL, APTs and The Future Of Security
One of the biggest talks at this year’s Black Hat Briefings was a presentation on the structural problem with digital certificate authorities by Moxie Marlinspike. The subsequent hack of Dutch certificate authority DigiNotar and a damning report on that attack only weeks later, and more recent...
CVE-2011-3700
Advanced Electron Forum AEF 1.0.8 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by languages/english/deletetopiclang.php...
Information disclosure
Advanced Electron Forum AEF 1.0.8 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by languages/english/deletetopiclang.php...
CVE-2011-3700
Advanced Electron Forum AEF 1.0.8 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by languages/english/deletetopiclang.php...
CVE-2011-3700
Vulnerability: CVE-2011-3700 in Advanced Electron Forum (AEF) 1.0.8. Issue: Remote attackers can disclose sensitive information by making a direct request to a PHP file (languages/english/deletetopic_lang.php), causing an error message that reveals the installation path. Impact: Information discl...
Massachusetts Inaugurates New Cyber Security Center
Hundreds of business leaders and academics joined Massachusetts Governor Deval Patrick and Attorney General Martha Coakley to launch the state’s Advanced Cyber Security Center ACSC, one of the first of its kind in the nation. Speaking at the local headquarters of the MITRE Corporation, Patrick an...
CVE-2011-3321
CVE-2011-3321 affects Siemens WinCC flexible Runtime and SIMATIC WinCC (TIA Portal) Runtime Advanced Loader. The issue is a heap-based buffer overflow in the loader’s handling of inputs on 2308/TCP, enabling remote attackers to cause memory corruption and potentially execute arbitrary code or cau...
McAfee DeepSAFE - Anti-rootkit Security Solution
McAfee DeepSAFE - Anti-rootkit Security Solution McAfee previewed its DeepSAFE hardware-assisted security technology for proactively detecting and preventing stealthy advanced persistent threats APTs and malware. The technology, which was co-developed with Intel, sits below the OS, providing the...
McAfee DeepSAFE - Anti-rootkit Security Solution
McAfee DeepSAFE - Anti-rootkit Security Solution McAfee previewed its DeepSAFE hardware-assisted security technology for proactively detecting and preventing stealthy advanced persistent threats APTs and malware. The technology, which was co-developed with Intel, sits below the OS, providing the...
Advanced Image Hosting Cross Site Scripting Vulnerability
This host is running Advanced Image Hosting and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbadvancedimagehostingxssvuln.nasl 5793 2017-03-30 13:40:15Z cfi $ Advanced Image Hosting Cross Site Scripting Vulnerability Authors: Madhuri D Copyright: Copyright c 20...
Advanced Image Hosting Cross Site Scripting Vulnerability
Advanced Image Hosting is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
NATO Looks to Team With India To Fight Cybercrime
The North Atlantic Treaty Organization NATO is looking to enlist the help of India when it comes to contending with cyber threats from China, according to a recent report. According to a piece in the Economic Times, NATO hopes to strengthen its ties with the Southeast Asia republic, citing its...
IZotope Rx Advanced Local Buffer Overflow
Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title:IZotope Rx Advanced Local Buffer Overflow Author: Angel Injection Thanks: r0073r // Sid3^effects // r4dc0re // CrosS || Inj3ct0r Team || "SeeMe" // XroGuE // gunslinger // indoushka // KnocKout // ZoRLu //...
Advanced Image Hosting Script 2.3 - 'report.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/49457/info YABSoft Advanced Image Hosting Script is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
Advanced Image Hosting Script 2.3 - report.php Cross-Site Scripting
Advanced Image Hosting Script 2.3 - report.php Cross-Site Scripting source: https://www.securityfocus.com/bid/49457/info YABSoft Advanced Image Hosting Script is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this...
VulnCheck KEV: CVE-2007-4816
Multiple buffer overflows in the BaoFeng2 storm ActiveX control in Mps.dll allow remote attackers to have an unknown impact via a long 1 URL, 2 backImage, or 3 titleImage property value; 4 a long first argument to the advancedOpen method; a long argument to the 5 isDVDPath or 6...
Bit-7 Informatics SQL Injection Vulnerability
Exploit for php platform in category web applications Bit-7 Informatics SQL Injection Vulnerability ---------------------------------------------------- Author : Yassin Aboukir E-mail : email protected Web : Www.Yaboukir.Com ---------------------------------------------------- Title : Bit-7...
[security bulletin] HPSBHF02699 SSRT100592 rev.1 - HP ProLiant SL Advanced Power Manager (SL-APM), Remote User Validation Failure
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02950841 Version: 1 HPSBHF02699 SSRT100592 rev.1 - HP ProLiant SL Advanced Power Manager SL-APM, Remote User Validation Failure NOTICE: The information in this Security Bulletin should be acted...